This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/04F408A8CB6111F09D31F110C4F9AE02.roa
File:                     04F408A8CB6111F09D31F110C4F9AE02.roa (raw, json)
Hash identifier:          mRhrGGACqI/fwAFCnhDqN7VI8b4Hx/imcetteQl2PYA=
Subject key identifier:   16:A7:E5:FA:32:CB:77:C6:60:C5:A4:49:42:56:3F:32:F6:F1:67:A7
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       09F0
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/04F408A8CB6111F09D31F110C4F9AE02.roa
Signing time:             Thu 27 Nov 2025 07:16:40 +0000
ROA not before:           Thu 27 Nov 2025 07:16:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     148996
IP address blocks:        103.142.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Nov 27 07:16:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6927fad8-0962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:d2:d6:1e:fb:43:fd:89:cc:ef:a0:bf:be:
                    39:66:1f:4f:c7:21:d0:0a:b1:98:63:a9:a3:72:e8:
                    28:15:f1:93:92:55:db:cc:cd:f7:68:c4:18:0d:d4:
                    61:b0:ed:e1:53:a2:12:74:6f:28:b2:91:16:54:58:
                    d2:cb:dd:52:bb:ce:8b:0d:8e:b1:cf:c0:d5:5a:e8:
                    ff:4d:30:8a:8a:fa:34:5a:48:77:70:18:7e:90:3a:
                    cd:a2:c4:26:70:62:e8:e2:e1:86:a1:20:84:cd:46:
                    49:ca:92:75:74:77:a6:2c:d8:5c:c5:62:61:6c:85:
                    a9:f0:16:8a:98:29:2c:35:6b:d5:7a:ff:07:6a:13:
                    45:57:54:71:0d:84:e6:0b:6a:64:21:95:00:d6:1d:
                    67:ed:1a:f7:5b:76:2c:d9:48:bb:19:7e:bc:cb:03:
                    e3:c4:3a:49:34:54:d5:8d:9f:68:68:1d:85:ba:34:
                    c9:e2:14:a3:90:cc:73:6c:b9:40:64:78:22:d6:2d:
                    ee:fb:48:e3:1f:cb:85:69:69:50:db:be:65:f4:c4:
                    70:a3:1b:ba:be:cf:ac:0c:27:f1:32:c2:00:b3:d6:
                    5b:64:e5:ff:3e:8f:a3:6a:64:fd:f1:9c:1a:3f:fb:
                    8d:8f:8f:64:b9:b2:24:da:4f:c1:1f:25:e9:7b:12:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:E5:FA:32:CB:77:C6:60:C5:A4:49:42:56:3F:32:F6:F1:67:A7
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/04F408A8CB6111F09D31F110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:16:87:40:38:9a:39:f9:63:20:ed:88:7e:cd:3e:55:5e:
         40:3c:cb:b2:87:20:27:8e:b9:fa:28:54:85:ac:a9:d3:26:ee:
         06:f7:9e:a6:73:80:49:db:80:52:e8:3e:b6:c0:2a:f5:ce:07:
         14:56:df:ec:db:e1:4e:09:24:8a:53:a6:80:98:53:20:51:85:
         29:47:94:c6:33:29:71:cc:e7:91:98:f9:d6:fe:26:12:3e:7e:
         35:01:59:94:4a:dd:ca:aa:45:1d:97:39:f8:4e:ca:b0:dc:75:
         f9:57:ea:c0:fc:d7:fa:bc:d6:25:2c:9e:d6:46:08:ee:28:45:
         1b:1b:d6:01:6d:36:86:31:66:5b:dc:cc:f1:fd:28:77:0e:c4:
         61:cd:19:b6:de:8e:c0:66:05:ff:4b:46:72:21:d2:25:5a:11:
         7c:e4:cd:63:63:e8:20:de:83:a5:91:08:d0:11:10:5e:38:5c:
         70:2c:f0:29:f0:8a:e1:b7:7d:ef:91:eb:cc:c7:e7:e0:81:c1:
         79:47:ad:46:d2:76:a9:29:41:2a:45:69:a2:5d:75:33:8d:eb:
         6b:35:83:13:06:13:2e:1a:03:1b:0b:81:8d:ee:38:e6:1e:a2:
         7f:5b:5c:e8:62:f1:40:9f:55:b8:ff:df:d4:e4:47:18:87:f7:
         88:6a:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:37 2025 by rpki-client